Comment by matthijs_

Excellent point. However, I think username / password will be (at least partially) replaced by this:

https://passwordless.net/ - Token based authentication